Trusted login of user accounts

ABSTRACT

Technologies related to trusted user account login are disclosed. In one implementation, a temporary trusted login token request for accessing a service page from an originating application is received. A temporary trusted login token based on the temporary trusted login token request is generated. The temporary trusted login token is sent to the originating application. A service page access request is received for accessing the service page generated based on the temporary trusted login token. The temporary trusted login token including the service authorization from the service page access request is identified. Whether the service page is included in the one or more service pages that are identified by the service authorization is determined, and trusted login to the service page from the originating application is allowed if the service page is included in the one or more service pages.

CROSS-REFERENCE TO RELATED APPLICATIONS

This application is a continuation of U.S. patent application Ser. No.15/885,234, now allowed, filed on Jan. 31, 2018, which claims priorityto Chinese Patent Application No. 201710071568.6, filed on Feb. 9, 2017,and each application is incorporated by reference in its entirety.

TECHNICAL FIELD

This disclosure relates to user account security, more particularly, totrusted user account login.

BACKGROUND

An increasing number of software and applications are developed for usercomputing devices including personal computer (PC), APPLE MACINTOSH, andmobile devices. Most software and applications require a user to inputuser name and password for account login.

In some cases, after a user logs in to a user account for an applicationA, the login information can be used to automatically log in to anapplication B that trusts application A. The automatic login toapplication B is based on its trusted relationship with application A,and is sometimes referred to as a trusted login. In some cases,application A can perform functionalities using services provided byapplication B after the trusted login.

When a user performs a trusted login to application B from applicationA, application B first provides application A with trusted logininformation (for example, a number). Application A writes the securitylogin information provided by the user and the trusted login informationprovided by application B to a login request, encrypts the login requestusing an encryption key and sends the security information toapplication B. Application B uses a public key to decrypt the loginrequest and to check whether the trusted login number is legitimate. Ifso, application B allows the user access from application A. However, ifapplication A is hacked, the trusted login information can be used by anauthorized user to log in to application B, even if application B has amore restrictive security requirement.

SUMMARY

The present disclosure describes methods and systems, includingcomputer-implemented methods, computer program products, and computersystems for securely performing trusted user account login.

In an implementation, a temporary trusted login token request foraccessing a service page from an originating application is received. Atemporary trusted login token based on the temporary trusted login tokenrequest is generated, wherein the temporary trusted login token includesa service authorization that identifies one or more service pages thatcan be accessed through temporary trusted login. The temporary trustedlogin token is sent to the originating application. A service pageaccess request is received for accessing the service page generatedbased on the temporary trusted login token. The temporary trusted logintoken including the service authorization from the service page accessrequest is identified. Whether the service page is included in the oneor more service pages that are identified by the service authorizationis determined, and trusted login to the service page from theoriginating application is allowed if the service page is included inthe one or more service pages.

Implementations of the described subject matter, including thepreviously described implementation, can be implemented using acomputer-implemented method; a non-transitory, computer-readable mediumstoring computer-readable instructions to perform thecomputer-implemented method; and a computer-implemented systemcomprising one or more computer memory devices interoperably coupledwith one or more computers and having tangible, non-transitory,machine-readable media storing instructions that, when executed by theone or more computers, perform the computer-implemented method/thecomputer-readable instructions stored on the non-transitory,computer-readable medium.

The subject matter described in this specification can be implemented inparticular implementations, so as to realize one or more of thefollowing advantages. First, by issuing a temporary trusted login token,a first server can use a service authorization to provide limited accessfrom an originating application to a service page of a targetapplication without performing additional login steps. Second, thelimited access allowed by the service authorization can protectunauthorized service pages from being accessed using trusted login,which improves data security. Third, by returning service pages to theoriginating application after a trusted login, a trusted user does notneed to be redirected to the target application to perform the service,improving the user's experience.

The details of one or more implementations of the subject matter of thisspecification are set forth in the Detailed Description, the Claims, andthe accompanying drawings. Other features, aspects, and advantages ofthe subject matter will become apparent to those of ordinary skill inthe art from the Detailed Description, the Claims, and the accompanyingdrawings.

DESCRIPTION OF DRAWINGS

FIG. 1 is a flowchart illustrating an example of a method for trustedlogin to a service page from an originating application, according to animplementation of the present disclosure.

FIG. 2 is a flowchart illustrating an example of a method for trustedlogin to a service page served by a first server, according to animplementation of the present disclosure.

FIG. 3 is a flowchart illustrating an example of a method for handling atemporary trusted login token, according to an implementation of thepresent disclosure.

FIG. 4 is a flowchart illustrating an example of a method for verifyinga temporary trusted login token, according to an implantation of thepresent disclosure.

FIG. 5 is a swim lane diagram illustrating an example of a trusted loginmethod 500, according to an implementation of the present disclosure.

FIG. 6 is a block diagram illustrating an example of acomputer-implemented system used to provide computationalfunctionalities associated with described algorithms, methods,functions, processes, flows, and procedures, according to animplementation of the present disclosure.

Like reference numbers and designations in the various drawings indicatelike elements.

DETAILED DESCRIPTION

The following detailed description describes a method for trusted loginto multiple user computing device applications, and is presented toenable any person skilled in the art to make and use the disclosedsubject matter in the context of one or more particular implementations.Various modifications, alterations, and permutations of the disclosedimplementations can be made and will be readily apparent to those ofordinary skill in the art, and the general principles defined can beapplied to other implementations and applications, without departingfrom the scope of the present disclosure. In some instances, one or moretechnical details that are unnecessary to obtain an understanding of thedescribed subject matter and that are within the skill of one ofordinary skill in the art may be omitted so as to not obscure one ormore described implementations. The present disclosure is not intendedto be limited to the described or illustrated implementations, but to beaccorded the widest scope consistent with the described principles andfeatures.

At a high-level, a trusted login system for performing trusted login caninclude two application subsystems. An originating application subsystemincludes a second server and an originating application that a useroperates on. A target application subsystem includes a first server anda service page for a service provided by the first server that the userseeks for trusted login. An access entrance to the service page for theservice provided by the first server is embedded in a user interface(UI) of the originating application. A user can perform trusted login tothe service page by operating on the access entrance embedded in the UIof the originating application.

FIG. 1 is a flowchart illustrating an example method 100 for trustedlogin to a service page from an originating application, according to animplementation of the present disclosure. For clarity of presentation,the description that follows generally describes method 100 in thecontext of the other figures in this description. However, it will beunderstood that method 100 can be performed, for example, by any system,environment, software, and hardware, or a combination of systems,environments, software, and hardware, as appropriate. In someimplementations, various steps of method 100 can be run in parallel, incombination, in loops, or in any order.

At 110, a trusted login request is sent from an originating applicationto a second server serving the originating application for logging to aservice page served by a first server. In some cases, the trusted loginrequest to a second server is sent in response to a user performing anoperation on an access entrance on a UI of the originating application.The access entrance can be a hyperlink embedded in the UI. The servicepage can be included in a target application for services provided bythe first server.

The trusted login request can include a service identification (ID) ofthe service page. The service ID can be unique to the service page to beaccessed from the originating application. The trusted login request canalso include a user ID and password. The user ID and password can beused to log in to the second server, or allow the second server toauthenticate the user's identity for using the originating application.When the user successfully logs in from the originating application tothe second server using the user ID and password, or the user's identityis otherwise verified by the second server, the second server can send atemporary trusted login token to the originating application. From 110,method 100 proceeds to 120.

At 120, the temporary trusted login token sent by the second server isreceived by the originating application. The temporary trusted logintoken can be a certificate for the originating application to visit thefirst server and access the service page served by the first server. Aservice authorization for accessing one or more service pages can bewritten in the temporary trusted login token. The originatingapplication can be restricted from accessing service pages not allowedby the service authorization of the temporary trusted login token. Thetemporary trusted login token can be generated by the first server inresponse to a temporary trusted login token request from the secondserver and is sent back to the second server. The second server can thenforward the temporary trusted login token to the originatingapplication. From 120, method 100 proceeds to 130.

At 130, an access request for accessing the service page provided by thefirst server is generated based on the received temporary trusted logintoken and sent to the first server. During generation of the accessrequest for accessing the service page, the access request can begenerated based on the temporary trusted login token and the service ID.In some cases, the access request can also be generated based on theuser ID. If the access request includes the user ID, the first servercan search for, or generate, a user ID for user account login to theservice page based on a predetermined user ID mapping relationshipbetween the second server and the first server.

The originating application can then wait for the first server to returna service page to the UI of the originating application. Upon receivingthe service page, the originating application can perform servicesprovided by the service page. Because the service pages that can beaccessed from the originating application are determined by the serviceauthorization of the temporary trusted login token, the accesspermission to services provided by the service page can be customized toallow enhanced security. After 130, method 100 ends.

FIG. 2 is a flowchart illustrating an example method 200 for trustedlogin to a service page served by a second server, according to animplementation of the present disclosure. For clarity of presentation,the description that follows generally describes method 200 in thecontext of the other figures in this description. However, it will beunderstood that method 200 can be performed, for example, by any system,environment, software, and hardware, or a combination of systems,environments, software, and hardware, as appropriate. In someimplementations, various steps of method 200 can be run in parallel, incombination, in loops, or in any order.

At 210, a trusted login request is received by a second server from anoriginating application. From 210, method 200 proceeds to 220.

At 220, a temporary trusted login token request based on the receivedtrusted login request is sent to a first server. The temporary trustedlogin token request can be generated based on the trusted login requestand a server ID of the second server. The first server can determine,based on the server ID, whether the second server is a trusted server.If the second server is a trusted server, the first server can parse thetrusted login request included in the token acquisition request, andsend a temporary login token to the second server. If the second serveris not a trusted server, the first server can reject the tokenacquisition request.

The temporary trusted login token request can also be generated based onthe trusted login request and a current trusted login ID issued by thefirst server. The current trusted login ID can be a certificate used bythe second server to obtain a temporary trusted login token. If thecurrent trusted login ID is legitimate, the first server can parse thetrusted login request in the temporary trusted login token request todetermine whether to send the temporary login token. If the currenttrusted login ID is not legitimate, the first server can reject to sendthe temporary login token to the second server.

The current trusted login ID can be a trusted login number. The trustedlogin number can be issued by the first server to the trusted secondserver. The trusted login number can be a permanent number, and can bevalid within a predetermined time period. In some cases, the trustedlogin number can also be updated dynamically. The first server canupdate the trusted login number periodically and then send it to thesecond server.

In some cases, the second server can directly send the temporary trustedlogin token request to the first server after receiving a trusted loginrequest from the originating application. In some other cases, thesecond server can parse the trusted login request to determine whetherthe trusted login request is legitimate (for example, determine whetherthe originating application has been used to successfully log in to thesecond server, or the first server providing the service page hase-signed an agreement with the second server). If the trusted loginrequest is determined to be legitimate, the second server then sends thetemporary trusted login token request to the first server. If thetrusted login request is determined to be not legitimate, the secondserver can return a failure message to the originating application. From220, method 200 proceeds to 230.

At 230, a temporary trusted login token is received from the firstserver and forwarded to the originating application. After 230, method200 ends.

FIG. 3 is a flowchart illustrating an example method 300 for handlingtemporary trusted login token, according to an implementation of thepresent disclosure. For clarity of presentation, the description thatfollows generally describes method 300 in the context of the otherfigures in this description. However, it will be understood that method300 can be performed, for example, by any system, environment, software,and hardware, or a combination of systems, environments, software, andhardware, as appropriate. In some implementations, various steps ofmethod 300 can be run in parallel, in combination, in loops, or in anyorder.

At 310, a temporary trusted login token request is received by a firstserver from a second server. In some cases, after receiving the tokenacquisition request, the first server can generate a temporary trustedlogin token based on the temporary trusted login token request and set aservice authorization of the temporary trusted login token thatdetermines one or more service pages that trusted login can be allowedby accessing from the originating application. In some cases, the firstserver can first determine whether the originating application is atrusted client application based on the token acquisition request,before generating the temporary trusted login token.

In some cases, the first server can determine whether the originatingapplication is a trusted client application based on whether thetemporary trusted login token request includes a current trusted loginID issued by the first server to the second server. If so, it isdetermined that the originating application is a trusted clientapplication. Otherwise, it is determined that the originatingapplication is not a trusted client application.

In some cases, the first server can determine whether the originatingapplication is a trusted client application based on user ID mappingbetween the second server and the first server. For example, a firstserver can identify a user ID of the originating application in thetoken acquisition request, and determine whether a corresponding user IDexists in the first server. If a corresponding user ID exists, it isdetermined that the originating application is a trusted clientapplication. Otherwise, it is determined that the originatingapplication is not a trusted client application. If it is determinedthat the originating application is not a trusted client application,the first server can return a failure message to the second server.Otherwise, the method 300 proceeds from 310 to 320.

At 320, a temporary trusted login token is generated based on thetemporary trusted login token request and a service authorization is setfor the temporary trusted login token that identifies one or moreservice pages that trusted login from the originating application isallowed. The service authorization can be set for one or more servicepages. The setting of the service authorization can include establishingat least one of a first mapping relationship or a second mappingrelationship. The first mapping relationship can be a mappingrelationship between the temporary trusted login token and one or moreservice IDs corresponding to the one or more allowed service pages. Thesecond mapping relationship can be a mapping relationship between thetemporary trusted login token and a current trusted login ID issued tothe second server. Because the current trusted login ID is associatedwith a server, by using the second mapping relationship, the temporarytrusted login token can be directed to the second server. As such, thetemporary trusted login token can be protected from unauthorized accessby other servers. For example, in the mapping relationships shown inTable 1, a temporary trusted login token x1579 can only be issued toserver Y1 corresponding to a current trusted login ID 4627, and cannotbe issued to servers Y2 and Y3.

TABLE 1 Temporary Trusted Current Trusted Login Token Server Service IDLogin ID x1579 Y1 101 4627 y2641 Y2 101 4786 x6478 Y3 103 3451

In some cases, the temporary trusted login token can be generated basedon specific rules for authenticity check. In some cases, a time limitcan be set for the temporary trusted login token, such that thetemporary trusted login token expires after the time limit. From 320,method 300 proceeds to 330.

At 330, the temporary trusted login token can be sent to the originalapplication through the second server. After 330, method 300 ends.

FIG. 4 is a flowchart illustrating an example of a method 400 forverifying a temporary trusted login token, according to an implantationof the present disclosure. For clarity of presentation, the descriptionthat follows generally describes method 400 in the context of the otherfigures in this description. However, it will be understood that method400 can be performed, for example, by any system, environment, software,and hardware, or a combination of systems, environments, software, andhardware, as appropriate. In some implementations, various steps ofmethod 400 can be run in parallel, in combination, in loops, or in anyorder.

At 410, a service page access request sent from the originatingapplication is received. From 410, method 400 proceeds to 420.

At 420, a temporary trusted login token is identified from the servicepage access request, and whether the temporary trusted login tokenincludes a service authorization to access the service page isdetermined. In some cases, in order to improve information feedbackefficiency of the first server, before determining whether the temporarytrusted login token includes the service authorization, the first servercan determine whether the temporary trusted login token is legitimate orunexpired, in order to improve information feedback efficiency of thefirst server. If it is determined that the temporary trusted login tokenis not legitimate or has expired, the service page access request can berejected by the first server. If it is determined that the temporarytrusted login token is legitimate and has not expired, the determinationon the service authorization is then performed.

In some cases, whether the service page can be accessed based on theservice authorization can be determined from a first mappingrelationship between service IDs of the service pages and the temporarytrusted login tokens. The first mapping relationship and the secondmapping relationship are discussed in the description of 320 of FIG. 3.The service ID of the service page can be identified from the servicepage access request. If the service authorization can be parsed toidentify a first mapping relationship between the temporary trustedlogin token and the service ID, the temporary trusted login token canhave the service authorization to access the service page. Otherwise,the temporary trusted login token does not have the serviceauthorization to access the service page.

In some cases, the first mapping relationship and the second mappingrelationship are used to determine whether the service authorization canallow access to the requested service page. The second mappingrelationship can be a mapping relationship between the temporary trustedlogin token and a current trusted login ID issued to the second server.The current trusted login ID can be issued by the first server to thesecond server that provides service to the originating application. Whenit is determined that the temporary trusted login token and the serviceID of the service page meet the first mapping relationship and thesecond mapping relationship, the temporary trusted login token can havethe service authorization to access the corresponding service page.Otherwise, the temporary trusted login token does not have the serviceauthorization to access the service page.

For example, assume that the mapping relationship established by thefirst server for the temporary trusted login token is based on Table 1as described in the description of FIG. 3. The temporary trusted logintoken in the page access request received by the first server is x6478,the service ID of the service page to be accessed is 103, and thecurrent trusted login ID of the second server is 3450. Based on Table 1,the temporary trusted login token in the page access request and theservice ID satisfy the first mapping relationship, but the temporarytrusted login token and the current trusted login ID do not satisfy thesecond mapping relationship (the temporary trusted login token x6478corresponds to a current trusted login ID 3451, rather than 3450according to the second mapping relationship). The temporary trustedlogin token x6478 can then be determined as an illegitimate token whichmay be usurped or has expired. As a result, the first server can rejectthe current service access request. From 420, method 400 proceeds to430.

At 430, trusted login from the originating application to the firstserver is allowed if the temporary trusted login token is determined tohave the service authorization to access the service page served by thefirst server. Otherwise, trusted login to the first server is rejected.

In some cases, trusted login can be performed to the first serverinstead of a target application with the service page served by thefirst server. In other words, when performing trusted login, the servicepage provided by the target application served by the first server canbe forwarded to the originating application, so the user does not needto be redirected to the UI of the target application for trusted login.As such, the trusted login for accessing services is more efficientlyperformed and user experience can be improved. For example, if anoriginating application served by a second server is a map application,and a target application with the service page served by a first serveris a payment application, a user using the map application can click anaccess entrance (for example, a hyperlink) on the originatingapplication to request access to a service page of the paymentapplication. The first server serving the payment application can verifyand complete the trusted login of the user and return the service pageto the map application without redirecting the user to the paymentapplication.

In some cases, the service page served by the first server can be loadedto the originating application in an embedded manner. A service processand service presentation of the service page can be implemented by usingan HTML5 (H5) page. A H5 page can be a page implemented by using thefifth revised language of the hypertext markup language. As such, thesoftware and system development for the target application and the firstserver can be reduced. The first server only needs to complete thetrusted login and return the service page to the originatingapplication, hence can distribute the service page to more applicationsand user computing devices.

After trusted login is completed, the first server can save a user ID inthe service page. For example, a control over a “session” between theoriginating application and the service page can be recorded based onthe trusted login result, and an ID of a user of the originatingapplication can be written into the “session” to indicate that thetrusted login is successful. In some cases, within a predetermined timeperiod, the originating application does not need to log in to the firstserver after a successful trusted login. The service page can directlyrespond to service operations performed through the originatingapplication within the predetermined time period.

FIG. 5 is a swim lane diagram illustrating an example of a trusted loginmethod 500, according to an implementation of the present disclosure.The trusted login method 500 is performed by an originating application505, a second server 510, a service page 515 of a target application,and a first server 520 that provides service to the service page 515 ofthe target application.

At 525, a trusted login request is sent from an originating application505 to a second server 510 serving the originating application 505 forlogging to a service page 515, served by a first server 520. In somecases, the trusted login request to a second server 510 is sent inresponse to a user performing an operation on an access entrance on a UIof the originating application 505. The access entrance can be ahyperlink embedded in the UI. The service page 515 can be included in atarget application for services provided by the first server 520.

The trusted login request can include a service identification (ID) ofthe service page 515. The service ID can be unique to the service page515 to be accessed from the originating application 505. The trustedlogin request can also include a user ID and password. The user ID andpassword can be used to log in to the second server 510, or allow thesecond server 510 to authenticate the user's identity for using theoriginating application 505. When the user successfully logs in from theoriginating application 505 to the second server 510 using the user IDand password, or the user's identity is otherwise verified by the secondserver 510, the second server 510 can send a temporary trusted logintoken to the originating application 505. From 525, method 500 proceedsto 530.

At 530, the trusted login request is received by a second server 510from an originating application 505. From 530, method 500 proceeds to535.

At 535, a temporary trusted login token request based on the receivedtrusted login request is sent to a first server 520. The temporarytrusted login token request can be generated based on the trusted loginrequest and a server ID of the second server 510. The first server 520can determine, based on the server ID, whether the second server 510 isa trusted server. If the second server 510 is a trusted server, thefirst server 520 can parse the trusted login request included in thetoken acquisition request, and send a temporary login token to thesecond server 510. If the second server 510 is not a trusted server, thefirst server 520 can reject the token acquisition request.

The temporary trusted login token request can also be generated based onthe trusted login request and a current trusted login ID issued by thefirst server 520. The current trusted login ID can be a certificate usedby the second server 510 to obtain a temporary trusted login token. Ifthe current trusted login ID is legitimate, the first server 520 canparse the trusted login request in the temporary trusted login tokenrequest to determine whether to send the temporary login token. If thecurrent trusted login ID is not legitimate, the first server 520 canreject to send the temporary login token to the second server 510.

The current trusted login ID can be a trusted login number. The trustedlogin number can be issued by the first server 520 to the trusted secondserver 510. The trusted login number can be a permanent number, and canbe valid within a predetermined time period. In some cases, the trustedlogin number can also be updated dynamically. The first server 520 canupdate the trusted login number periodically and then send to the secondserver 510.

In some cases, the second server 510 can directly send the temporarytrusted login token request to the first server 520 after receiving atrusted login request from the originating application 505. In someother cases, the second server 510 can parse the trusted login requestto determine whether the trusted login request is legitimate (forexample, determine whether the originating application 505 has been usedto successfully log in to the second server 510, or the first server 520providing the service page 515 has e-signed an agreement with the secondserver 510). If the trusted login request is determined to belegitimate, the second server 510 then sends the temporary trusted logintoken request to the first server 520. If the trusted login request isdetermined to be not legitimate, the second server 510 can return afailure message to the originating application 505. From 535, method 500proceeds to 540.

At 540, the temporary trusted login token request is received by thefirst server 520 from the second server 510. In some cases, afterreceiving the token acquisition request, the first server 520 cangenerate a temporary trusted login token based on the temporary trustedlogin token request and set a service authorization of the temporarytrusted login token that determines one or more service pages to whichtrusted login can be allowed from the originating application 505. Insome cases, the first server 520 can first determine whether theoriginating application 505 is a trusted client application based on thetoken acquisition request, before generating the temporary trusted logintoken.

In some cases, the first server 520 can determine whether theoriginating application 505 is a trusted client application based onwhether the temporary trusted login token request includes a currenttrusted login ID issued by the first server 520 to the second server510. If so, it is determined that the originating application 505 is atrusted client application. Otherwise, it is determined that theoriginating application 505 is not a trusted client application.

In some cases, the first server 520 can determine whether theoriginating application 505 is a trusted client application based onuser ID mapping between the second server 510 and the first server 520.For example, a first server 520 can identify a user ID of theoriginating application 505 in the token acquisition request, anddetermine whether a corresponding user ID exists in the first server520. If a corresponding user ID exists, it is determined that theoriginating application 505 is a trusted client application. Otherwise,it is determined that the originating application 505 is not a trustedclient application. If it is determined that the originating application505 is not a trusted client application, the first server 520 can returna failure message to the second server 510. From 540, method 500proceeds to 545.

At 545, the temporary trusted login token is generated based on thetemporary trusted login token request and a service authorization is setfor the temporary trusted login token that determines one or moreservice pages to which trusted login from the originating application505 is allowed. The service authorization can be set for one or moreservice pages. The setting of the service authorization can includeestablishing at least one of a first mapping relationship or a secondmapping relationship. The first mapping relationship can be a mappingrelationship between the temporary trusted login token and one or moreservice IDs corresponding to the one or more allowed service pages. Thesecond mapping relationship can be a mapping relationship between thetemporary trusted login token and a current trusted login ID issued tothe second server 510. Because the current trusted login ID isassociated with a server, by using the second mapping relationship, thetemporary trusted login token can be directed to the second server 510.As such, the temporary trusted login token can be protected fromunauthorized access from other servers.

In some cases, the temporary trusted login token can be generated basedon specific rules for authenticity check. In some cases, a time limitcan be set for the temporary trusted login token, such that thetemporary trusted login token expires after the time limit and sends thetemporary trusted login token request to a first server 520. From 545,method 500 proceeds to 550.

At 550, the temporary trusted login token can be sent to the originatingapplication 505 by using the second server 510. From 550, method 500proceeds to 555.

At 555, the temporary trusted login token is received from the firstserver 520 and forwarded to the originating application 505. From 555,method 500 proceeds to 560.

At 560, the temporary trusted login token sent by the second server 510is received by the originating application 505. The temporary trustedlogin token can be a certificate for the originating application 505 tovisit the first server 520 and access the service page 515 served by thefirst server 520. A service authorization for accessing one or moreservice pages can be written in the temporary trusted login token. Theoriginating application 505 can be restricted from accessing servicepages not allowed by the service authorization of the temporary trustedlogin token. The temporary trusted login token can be generated by thefirst server 520 in response to a temporary trusted login token requestfrom the second server 510 and is sent back to the second server 510.The second server 510 can then forward the temporary trusted login tokento the originating application 505. From 560, method 500 proceeds to565.

At 565, an access request for accessing the service page 515 provided bythe first server 520 is generated based on the received temporarytrusted login token and sent to the first server 520. During generationof the access request for accessing the service page 515, the accessrequest can be generated based on the temporary trusted login token andthe service ID. In some cases, the access request can also be generatedbased on the user ID. If the access request includes the user ID, thefirst server 520 can search for, or generate, a user ID for user accountlogin to the service page 515 based on a predetermined user ID mappingrelationship between the second server 510 and the first server 520.

The originating application 505 can then wait for the first server 520to return a service page 515 to the UI of the originating application505. Upon receiving the service page 515, the originating application505 can perform service provided by the service page 515. Because theservice pages that can be accessed from the originating application 505are determined by the service authorization of the temporary trustedlogin token, the access permission to services provided by the servicepage 515 can be customized to allow enhanced security. From 565, method500 proceeds to 570.

At 570, a service page 515 access request sent from the originatingapplication 505 is received by the first server 520. From 570, method500 proceeds to 575.

At 575, the temporary trusted login token is identified from the servicepage 515 access request, and whether the temporary trusted login tokenincludes a service authorization to access the service page 515 isdetermined. In some cases, in order to improve information feedbackefficiency of the first server 520, before determining whether thetemporary trusted login token includes the service authorization, thefirst server 520 can determine whether the temporary trusted login tokenis legitimate or unexpired, in order to improve information feedbackefficiency of the first server 520. If it is determined that thetemporary trusted login token is not legitimate or has expired, theservice page 515 access request can be rejected by the first server 520.If it is determined that the temporary trusted login token is legitimateand has not expired, the determination on the service authorization isthen performed. From 575, method 500 proceeds to 580.

At 580, trusted login from the originating application 505 to the firstserver 520 is allowed if the temporary trusted login token is determinedto have the service authorization to access the service page 515 servedby the first server 520. Otherwise, trusted login to the first server520 is rejected. From 580, method 500 proceeds to 585.

At 585, a trusted login result is returned to the service page. From585, method 500 proceeds to 590. From 585, method 500 proceeds to 590.

At 590, trusted login to the service page is performed. After 590,method 500 ends.

By issuing a temporary trusted login token, a first server 520 can use aservice authorization to provide limited access from an originatingapplication 505 to a service page 515 of a target application withoutperforming additional login steps. The limited access allowed by theservice authorization can protect unauthorized service pages from beingaccessed using trusted login, which improves data security. By returningthe service page to the originating application 505 after trusted login,a trusted user does not need to be redirected to the target applicationto perform the service, such that the user's experience can be furtherimproved.

FIG. 6 is a block diagram illustrating an example of acomputer-implemented System 600 used to provide computationalfunctionalities associated with described algorithms, methods,functions, processes, flows, and procedures, according to animplementation of the present disclosure. In the illustratedimplementation, System 600 includes a Computer 602 and a Network 630.

The illustrated Computer 602 is intended to encompass any computingdevice such as a server, desktop computer, laptop/notebook computer,wireless data port, smart phone, personal data assistant (PDA), tabletcomputer, one or more processors within these devices, another computingdevice, or a combination of computing devices, including physical orvirtual instances of the computing device, or a combination of physicalor virtual instances of the computing device. Additionally, the Computer602 can include an input device, such as a keypad, keyboard, touchscreen, another input device, or a combination of input devices that canaccept user information, and an output device that conveys informationassociated with the operation of the Computer 602, including digitaldata, visual, audio, another type of information, or a combination oftypes of information, on a graphical-type user interface (UI) (or GUI)or other UI.

The Computer 602 can serve in a role in a distributed computing systemas a client, network component, a server, a database or anotherpersistency, another role, or a combination of roles for performing thesubject matter described in the present disclosure. The illustratedComputer 602 is communicably coupled with a Network 630. In someimplementations, one or more components of the Computer 602 can beconfigured to operate within an environment, includingcloud-computing-based, local, global, another environment, or acombination of environments.

At a high level, the Computer 602 is an electronic computing deviceoperable to receive, transmit, process, store, or manage data andinformation associated with the described subject matter. According tosome implementations, the Computer 602 can also include or becommunicably coupled with a server, including an application server,e-mail server, web server, caching server, streaming data server,another server, or a combination of servers.

The Computer 602 can receive requests over Network 630 (for example,from a client software application executing on another Computer 602)and respond to the received requests by processing the received requestsusing a software application or a combination of software applications.In addition, requests can also be sent to the Computer 602 from internalusers (for example, from a command console or by another internal accessmethod), external or third-parties, or other entities, individuals,systems, or computers.

Each of the components of the Computer 602 can communicate using aSystem Bus 603. In some implementations, any or all of the components ofthe Computer 602, including hardware, software, or a combination ofhardware and software, can interface over the System Bus 603 using anapplication programming interface (API) 612, a Service Layer 613, or acombination of the API 612 and Service Layer 613. The API 612 caninclude specifications for routines, data structures, and objectclasses. The API 612 can be either computer-language independent ordependent and refer to a complete interface, a single function, or evena set of APIs. The Service Layer 613 provides software services to theComputer 602 or other components (whether illustrated or not) that arecommunicably coupled to the Computer 602. The functionality of theComputer 602 can be accessible for all service consumers using theService Layer 613. Software services, such as those provided by theService Layer 613, provide reusable, defined functionalities through adefined interface. For example, the interface can be software written inJAVA, C++, another computing language, or a combination of computinglanguages providing data in extensible markup language (XML) format,another format, or a combination of formats. While illustrated as anintegrated component of the Computer 602, alternative implementationscan illustrate the API 612 or the Service Layer 613 as stand-alonecomponents in relation to other components of the Computer 602 or othercomponents (whether illustrated or not) that are communicably coupled tothe Computer 602. Moreover, any or all parts of the API 612 or theService Layer 613 can be implemented as a child or a sub-module ofanother software module, enterprise application, or hardware modulewithout departing from the scope of the present disclosure.

The Computer 602 includes an Interface 604. Although illustrated as asingle Interface 604, two or more Interfaces 604 can be used accordingto particular needs, desires, or particular implementations of theComputer 602. The Interface 604 is used by the Computer 602 forcommunicating with another computing system (whether illustrated or not)that is communicatively linked to the Network 630 in a distributedenvironment. Generally, the Interface 604 is operable to communicatewith the Network 630 and includes logic encoded in software, hardware,or a combination of software and hardware. More specifically, theInterface 604 can include software supporting one or more communicationprotocols associated with communications such that the Network 630 orhardware of Interface 604 is operable to communicate physical signalswithin and outside of the illustrated Computer 602.

The Computer 602 includes a Processor 605. Although illustrated as asingle Processor 605, two or more Processors 605 can be used accordingto particular needs, desires, or particular implementations of theComputer 602. Generally, the Processor 605 executes instructions andmanipulates data to perform the operations of the Computer 602 and anyalgorithms, methods, functions, processes, flows, and procedures asdescribed in the present disclosure.

The Computer 602 also includes a Database 606 that can hold data for theComputer 602, another component communicatively linked to the Network630 (whether illustrated or not), or a combination of the Computer 602and another component. For example, Database 606 can be an in-memory,conventional, or another type of database storing data consistent withthe present disclosure. In some implementations, Database 606 can be acombination of two or more different database types (for example, ahybrid in-memory and conventional database) according to particularneeds, desires, or particular implementations of the Computer 602 andthe described functionality. Although illustrated as a single Database606, two or more databases of similar or differing types can be usedaccording to particular needs, desires, or particular implementations ofthe Computer 602 and the described functionality. While Database 606 isillustrated as an integral component of the Computer 602, in alternativeimplementations, Database 606 can be external to the Computer 602.

The Computer 602 also includes a Memory 607 that can hold data for theComputer 602, another component or components communicatively linked tothe Network 630 (whether illustrated or not), or a combination of theComputer 602 and another component. Memory 607 can store any dataconsistent with the present disclosure. In some implementations, Memory607 can be a combination of two or more different types of memory (forexample, a combination of semiconductor and magnetic storage) accordingto particular needs, desires, or particular implementations of theComputer 602 and the described functionality. Although illustrated as asingle Memory 607, two or more Memories 607 or similar or differingtypes can be used according to particular needs, desires, or particularimplementations of the Computer 602 and the described functionality.While Memory 607 is illustrated as an integral component of the Computer602, in alternative implementations, Memory 607 can be external to theComputer 602.

The Application 608 is an algorithmic software engine providingfunctionality according to particular needs, desires, or particularimplementations of the Computer 602, particularly with respect tofunctionality described in the present disclosure. For example,Application 608 can serve as one or more components, modules, orapplications. Further, although illustrated as a single Application 608,the Application 608 can be implemented as multiple Applications 608 onthe Computer 602. In addition, although illustrated as integral to theComputer 602, in alternative implementations, the Application 608 can beexternal to the Computer 602.

The Computer 602 can also include a Power Supply 614. The Power Supply614 can include a rechargeable or non-rechargeable battery that can beconfigured to be either user- or non-user-replaceable. In someimplementations, the Power Supply 614 can include power-conversion ormanagement circuits (including recharging, standby, or another powermanagement functionality). In some implementations, the Power Supply 614can include a power plug to allow the Computer 602 to be plugged into awall socket or another power source to, for example, power the Computer602 or recharge a rechargeable battery.

There can be any number of Computers 602 associated with, or externalto, a computer system containing Computer 602, each Computer 602communicating over Network 630. Further, the term “client,” “user,” orother appropriate terminology can be used interchangeably, asappropriate, without departing from the scope of the present disclosure.Moreover, the present disclosure contemplates that many users can useone Computer 602, or that one user can use multiple computers 602.

Described implementations of the subject matter can include one or morefeatures, alone or in combination.

For example, in a first implementation, a computer-implemented method,comprising: receiving a temporary trusted login token request foraccessing a service page from an originating application; generating atemporary trusted login token based on the temporary trusted login tokenrequest, wherein the temporary trusted login token includes a serviceauthorization that identifies one or more service pages that can beaccessed through temporary trusted login; sending the temporary trustedlogin token to the originating application; receiving a service pageaccess request for accessing the service page generated based on thetemporary trusted login token; identifying the temporary trusted logintoken including the service authorization from the service page accessrequest; determining if the service page is included in the one or moreservice pages that are identified by the service authorization; andallowing trusted login to the service page from the originatingapplication if the service page is included in the one or more servicepages.

The foregoing and other described implementations can each, optionally,include one or more of the following features:

A first feature, combinable with any of the following features, whereinthe temporary trusted login token identifies a first mappingrelationship between an identification of the service page and thetemporary trusted login token, and a second mapping relationship betweenan identification of a current trusted login identification issued by aserver that serves the service page and the temporary trusted logintoken.

A second feature, combinable with any of the previous or followingfeatures, wherein the service authorization identifies the service pagewhen the temporary trusted login token satisfies the first mappingrelationship and the second mapping relationship.

A third feature, combinable with any of the previous or followingfeatures, further comprising sending the service page to the originatingapplication after determining the service page is included in the one ormore service pages that are identified by the service authorization.

A fourth feature, combinable with any of the previous or followingfeatures, wherein the temporary trusted login token is valid within apredetermined time period after being generated and is updatedperiodically.

In a second implementation, a non-transitory, computer-readable mediumstoring one or more instructions executable by a computer system toperform operations comprising: receiving a temporary trusted login tokenrequest for accessing a service page from an originating application;generating a temporary trusted login token based on the temporarytrusted login token request, wherein the temporary trusted login tokenincludes a service authorization that identifies one or more servicepages that can be accessed through temporary trusted login; sending thetemporary trusted login token to the originating application; receivinga service page access request for accessing the service page generatedbased on the temporary trusted login token; identifying the temporarytrusted login token including the service authorization from the servicepage access request; determining if the service page is included in theone or more service pages that are identified by the serviceauthorization; and allowing trusted login to the service page from theoriginating application if the service page is included in the one ormore service pages.

The foregoing and other described implementations can each, optionally,include one or more of the following features:

A first feature, combinable with any of the following features, whereinthe temporary trusted login token identifies a first mappingrelationship between an identification of the service page and thetemporary trusted login token, and a second mapping relationship betweenan identification of a current trusted login identification issued by aserver that serves the service page and the temporary trusted logintoken.

A second feature, combinable with any of the previous or followingfeatures, wherein the service authorization identifies the service pagewhen the temporary trusted login token satisfies the first mappingrelationship and the second mapping relationship.

A third feature, combinable with any of the previous or followingfeatures, further comprising sending the service page to the originatingapplication after determining the service page is included in the one ormore service pages that are identified by the service authorization.

A fourth feature, combinable with any of the previous or followingfeatures, wherein the temporary trusted login token is valid within apredetermined time period after being generated and is updatedperiodically.

In a third implementation, computer-implemented system, comprising: oneor more computers; and one or more computer memory devices interoperablycoupled with the one or more computers and having tangible,non-transitory, machine-readable media storing one or more instructionsthat, when executed by the one or more computers, perform one or moreoperations comprising: receiving a temporary trusted login token requestfor accessing a service page from an originating application; generatinga temporary trusted login token based on the temporary trusted logintoken request, wherein the temporary trusted login token includes aservice authorization that identifies one or more service pages that canbe accessed through temporary trusted login; sending the temporarytrusted login token to the originating application; receiving a servicepage access request for accessing the service page generated based onthe temporary trusted login token; identifying the temporary trustedlogin token including the service authorization from the service pageaccess request; determining if the service page is included in the oneor more service pages that are identified by the service authorization;and allowing trusted login to the service page from the originatingapplication if the service page is included in the one or more servicepages.

The foregoing and other described implementations can each, optionally,include one or more of the following features:

A first feature, combinable with any of the following features, whereinthe temporary trusted login token identifies a first mappingrelationship between an identification of the service page and thetemporary trusted login token, and a second mapping relationship betweenan identification of a current trusted login identification issued by aserver that serves the service page and the temporary trusted logintoken.

A second feature, combinable with any of the previous or followingfeatures, wherein the service authorization identifies the service pagewhen the temporary trusted login token satisfies the first mappingrelationship and the second mapping relationship.

A third feature, combinable with any of the previous or followingfeatures, further comprising sending the service page to the originatingapplication after determining the service page is included in the one ormore service pages that are identified by the service authorization.

A fourth feature, combinable with any of the previous or followingfeatures, wherein the temporary trusted login token is valid within apredetermined time period after being generated and is updatedperiodically.

Implementations of the subject matter and the functional operationsdescribed in this specification can be implemented in digital electroniccircuitry, in tangibly embodied computer software or firmware, incomputer hardware, including the structures disclosed in thisspecification and their structural equivalents, or in combinations ofone or more of them. Software implementations of the described subjectmatter can be implemented as one or more computer programs, that is, oneor more modules of computer program instructions encoded on a tangible,non-transitory, computer-readable medium for execution by, or to controlthe operation of, a computer or computer-implemented system.Alternatively, or additionally, the program instructions can be encodedin/on an artificially generated propagated signal, for example, amachine-generated electrical, optical, or electromagnetic signal that isgenerated to encode information for transmission to a receiver apparatusfor execution by a computer or computer-implemented system. Thecomputer-storage medium can be a machine-readable storage device, amachine-readable storage substrate, a random or serial access memorydevice, or a combination of computer-storage mediums. Configuring one ormore computers means that the one or more computers have installedhardware, firmware, or software (or combinations of hardware, firmware,and software) so that when the software is executed by the one or morecomputers, particular computing operations are performed.

The term “real-time,” “real time,” “realtime,” “real (fast) time (RFT),”“near(ly) real-time (NRT),” “quasi real-time,” or similar terms (asunderstood by one of ordinary skill in the art), means that an actionand a response are temporally proximate such that an individualperceives the action and the response occurring substantiallysimultaneously. For example, the time difference for a response todisplay (or for an initiation of a display) of data following theindividual's action to access the data can be less than 1 millisecond(ms), less than 1 second (s), or less than 5 s. While the requested dataneed not be displayed (or initiated for display) instantaneously, it isdisplayed (or initiated for display) without any intentional delay,taking into account processing limitations of a described computingsystem and time required to, for example, gather, accurately measure,analyze, process, store, or transmit the data.

The terms “data processing apparatus,” “computer,” or “electroniccomputer device” (or an equivalent term as understood by one of ordinaryskill in the art) refer to data processing hardware and encompass allkinds of apparatus, devices, and machines for processing data, includingby way of example, a programmable processor, a computer, or multipleprocessors or computers. The computer can also be, or further includespecial purpose logic circuitry, for example, a central processing unit(CPU), an FPGA (field programmable gate array), or an ASIC(application-specific integrated circuit). In some implementations, thecomputer or computer-implemented system or special purpose logiccircuitry (or a combination of the computer or computer-implementedsystem and special purpose logic circuitry) can be hardware- orsoftware-based (or a combination of both hardware- and software-based).The computer can optionally include code that creates an executionenvironment for computer programs, for example, code that constitutesprocessor firmware, a protocol stack, a database management system, anoperating system, or a combination of execution environments. Thepresent disclosure contemplates the use of a computer orcomputer-implemented system with an operating system of some type, forexample LINUX, UNIX, WINDOWS, MAC OS, ANDROID, IOS, another operatingsystem, or a combination of operating systems.

A computer program, which can also be referred to or described as aprogram, software, a software application, a unit, a module, a softwaremodule, a script, code, or other component can be written in any form ofprogramming language, including compiled or interpreted languages, ordeclarative or procedural languages, and it can be deployed in any form,including, for example, as a stand-alone program, module, component, orsubroutine, for use in a computing environment. A computer program can,but need not, correspond to a file in a file system. A program can bestored in a portion of a file that holds other programs or data, forexample, one or more scripts stored in a markup language document, in asingle file dedicated to the program in question, or in multiplecoordinated files, for example, files that store one or more modules,sub-programs, or portions of code. A computer program can be deployed tobe executed on one computer or on multiple computers that are located atone site or distributed across multiple sites and interconnected by acommunication network.

While portions of the programs illustrated in the various figures can beillustrated as individual components, such as units or modules, thatimplement described features and functionality using various objects,methods, or other processes, the programs can instead include a numberof sub-units, sub-modules, third-party services, components, libraries,and other components, as appropriate. Conversely, the features andfunctionality of various components can be combined into singlecomponents, as appropriate. Thresholds used to make computationaldeterminations can be statically, dynamically, or both statically anddynamically determined.

Described methods, processes, or logic flows represent one or moreexamples of functionality consistent with the present disclosure and arenot intended to limit the disclosure to the described or illustratedimplementations, but to be accorded the widest scope consistent withdescribed principles and features. The described methods, processes, orlogic flows can be performed by one or more programmable computersexecuting one or more computer programs to perform functions byoperating on input data and generating output data. The methods,processes, or logic flows can also be performed by, and computers canalso be implemented as, special purpose logic circuitry, for example, aCPU, an FPGA, or an ASIC.

Computers for the execution of a computer program can be based ongeneral or special purpose microprocessors, both, or another type ofCPU. Generally, a CPU will receive instructions and data from and writeto a memory. The essential elements of a computer are a CPU, forperforming or executing instructions, and one or more memory devices forstoring instructions and data. Generally, a computer will also include,or be operatively coupled to, receive data from or transfer data to, orboth, one or more mass storage devices for storing data, for example,magnetic, magneto-optical disks, or optical disks. However, a computerneed not have such devices. Moreover, a computer can be embedded inanother device, for example, a mobile telephone, a personal digitalassistant (PDA), a mobile audio or video player, a game console, aglobal positioning system (GPS) receiver, or a portable memory storagedevice.

Non-transitory computer-readable media for storing computer programinstructions and data can include all forms of permanent/non-permanentor volatile/non-volatile memory, media and memory devices, including byway of example semiconductor memory devices, for example, random accessmemory (RAM), read-only memory (ROM), phase change memory (PRAM), staticrandom access memory (SRAM), dynamic random access memory (DRAM),erasable programmable read-only memory (EPROM), electrically erasableprogrammable read-only memory (EEPROM), and flash memory devices;magnetic devices, for example, tape, cartridges, cassettes,internal/removable disks; magneto-optical disks; and optical memorydevices, for example, digital versatile/video disc (DVD), compact disc(CD)-ROM, DVD+/-R, DVD-RAM, DVD-ROM, high-definition/density (HD)-DVD,and BLU-RAY/BLU-RAY DISC (BD), and other optical memory technologies.The memory can store various objects or data, including caches, classes,frameworks, applications, modules, backup data, jobs, web pages, webpage templates, data structures, database tables, repositories storingdynamic information, or other appropriate information including anyparameters, variables, algorithms, instructions, rules, constraints, orreferences. Additionally, the memory can include other appropriate data,such as logs, policies, security or access data, or reporting files. Theprocessor and the memory can be supplemented by, or incorporated in,special purpose logic circuitry.

To provide for interaction with a user, implementations of the subjectmatter described in this specification can be implemented on a computerhaving a display device, for example, a CRT (cathode ray tube), LCD(liquid crystal display), LED (Light Emitting Diode), or plasma monitor,for displaying information to the user and a keyboard and a pointingdevice, for example, a mouse, trackball, or trackpad by which the usercan provide input to the computer. Input can also be provided to thecomputer using a touchscreen, such as a tablet computer surface withpressure sensitivity, a multi-touch screen using capacitive or electricsensing, or another type of touchscreen. Other types of devices can beused to interact with the user. For example, feedback provided to theuser can be any form of sensory feedback (such as, visual, auditory,tactile, or a combination of feedback types). Input from the user can bereceived in any form, including acoustic, speech, or tactile input. Inaddition, a computer can interact with the user by sending documents toand receiving documents from a client computing device that is used bythe user (for example, by sending web pages to a web browser on a user'smobile computing device in response to requests received from the webbrowser).

The term “graphical user interface,” or “GUI,” can be used in thesingular or the plural to describe one or more graphical user interfacesand each of the displays of a particular graphical user interface.Therefore, a GUI can represent any graphical user interface, includingbut not limited to, a web browser, a touch screen, or a command lineinterface (CLI) that processes information and efficiently presents theinformation results to the user. In general, a GUI can include a numberof user interface (UI) elements, some or all associated with a webbrowser, such as interactive fields, pull-down lists, and buttons. Theseand other UI elements can be related to or represent the functions ofthe web browser.

Implementations of the subject matter described in this specificationcan be implemented in a computing system that includes a back-endcomponent, for example, as a data server, or that includes a middlewarecomponent, for example, an application server, or that includes afront-end component, for example, a client computer having a graphicaluser interface or a Web browser through which a user can interact withan implementation of the subject matter described in this specification,or any combination of one or more such back-end, middleware, orfront-end components. The components of the system can be interconnectedby any form or medium of wireline or wireless digital data communication(or a combination of data communication), for example, a communicationnetwork. Examples of communication networks include a local area network(LAN), a radio access network (RAN), a metropolitan area network (MAN),a wide area network (WAN), Worldwide Interoperability for MicrowaveAccess (WIMAX), a wireless local area network (WLAN) using, for example,802.11 a/b/g/n or 802.20 (or a combination of 802.11x and 802.20 orother protocols consistent with the present disclosure), all or aportion of the Internet, another communication network, or a combinationof communication networks. The communication network can communicatewith, for example, Internet Protocol (IP) packets, Frame Relay frames,Asynchronous Transfer Mode (ATM) cells, voice, video, data, or otherinformation between network nodes.

The computing system can include clients and servers. A client andserver are generally remote from each other and typically interactthrough a communication network. The relationship of client and serverarises by virtue of computer programs running on the respectivecomputers and having a client-server relationship to each other.

While this specification contains many specific implementation details,these should not be construed as limitations on the scope of anyinvention or on the scope of what can be claimed, but rather asdescriptions of features that can be specific to particularimplementations of particular inventions. Certain features that aredescribed in this specification in the context of separateimplementations can also be implemented, in combination, in a singleimplementation. Conversely, various features that are described in thecontext of a single implementation can also be implemented in multipleimplementations, separately, or in any sub-combination. Moreover,although previously described features can be described as acting incertain combinations and even initially claimed as such, one or morefeatures from a claimed combination can, in some cases, be excised fromthe combination, and the claimed combination can be directed to asub-combination or variation of a sub-combination.

Particular implementations of the subject matter have been described.Other implementations, alterations, and permutations of the describedimplementations are within the scope of the following claims as will beapparent to those skilled in the art. While operations are depicted inthe drawings or claims in a particular order, this should not beunderstood as requiring that such operations be performed in theparticular order shown or in sequential order, or that all illustratedoperations be performed (some operations can be considered optional), toachieve desirable results. In certain circumstances, multitasking orparallel processing (or a combination of multitasking and parallelprocessing) can be advantageous and performed as deemed appropriate.

Moreover, the separation or integration of various system modules andcomponents in the previously described implementations should not beunderstood as requiring such separation or integration in allimplementations, and it should be understood that the described programcomponents and systems can generally be integrated together in a singlesoftware product or packaged into multiple software products.

Accordingly, the previously described example implementations do notdefine or constrain the present disclosure. Other changes,substitutions, and alterations are also possible without departing fromthe spirit and scope of the present disclosure.

Furthermore, any claimed implementation is considered to be applicableto at least a computer-implemented method; a non-transitory,computer-readable medium storing computer-readable instructions toperform the computer-implemented method; and a computer systemcomprising a computer memory interoperably coupled with a hardwareprocessor configured to perform the computer-implemented method or theinstructions stored on the non-transitory, computer-readable medium.

1.-15. (canceled)
 16. A computer-implemented method, the methodcomprising: receiving, at a second server that serves an originatingapplication and from a target client terminal, a request for trustedlogin, wherein the request for trusted login comprises a request toaccess a service page provided by a first server within a targetapplication; generating, by the second server, a trusted login tokenacquisition request, wherein the trusted login token acquisition requestis based on the request for trusted login, the generating comprising,obtaining a current trusted login identifier issued by the first serverto the second server, wherein the current trusted login identifiercertifies the second server to obtain a temporary trusted login token,and writing the current trusted login identifier into the request toaccess the service page provided by the first server to generate thetrusted login token acquisition request; sending, from the secondserver, the trusted login token acquisition request to the first server;receiving, at the second server, a temporary trusted login token fromthe first server, wherein the temporary trusted login token includes aservice authorization that identifies one or more service pages that canbe accessed through temporary trusted login, the temporary trusted logintoken comprising a first mapping relationship between one or moreservice identifications corresponding to one or more allowed servicepages and the temporary trusted login token, and further comprising asecond mapping relationship between a current trusted loginidentification issued by the first server and the temporary trustedlogin token, wherein the first mapping relationship and the secondmapping relationship are separate mapping relationships; and sending,from the second server, the temporary trusted login token to the targetclient terminal, wherein the target client terminal logs in to the firstserver and accesses the service page using the temporary trusted logintoken.
 17. The computer-implemented method of claim 16, wherein thetemporary trusted login token identifies a first mapping relationshipbetween an identification of the service page and the temporary trustedlogin token, and a second mapping relationship between an identificationof a current trusted login identification issued by a server that servesthe service page and the temporary trusted login token.
 18. Thecomputer-implemented method of claim 17, wherein the serviceauthorization identifies the service page when the temporary trustedlogin token satisfies the first mapping relationship and the secondmapping relationship.
 19. The computer-implemented method of claim 16,further comprising sending the service page to the originatingapplication after determining the service page is included in the one ormore service pages that are identified by the service authorization. 20.The computer-implemented method of claim 16, wherein the temporarytrusted login token is valid within a predetermined time period afterbeing generated and is updated periodically.
 21. A non-transitory,computer-readable medium storing one or more instructions executable bya computer system to perform operations comprising: receiving, at asecond server that serves an originating application and from a targetclient terminal, a request for trusted login, wherein the request fortrusted login comprises a request to access a service page provided by afirst server within a target application; generating, by the secondserver, a trusted login token acquisition request, wherein the trustedlogin token acquisition request is based on the request for trustedlogin, the generating comprising, obtaining a current trusted loginidentifier issued by the first server to the second server, wherein thecurrent trusted login identifier certifies the second server to obtain atemporary trusted login token, and writing the current trusted loginidentifier into the request to access the service page provided by thefirst server to generate the trusted login token acquisition request;sending, from the second server, the trusted login token acquisitionrequest to the first server; receiving, at the second server, atemporary trusted login token from the first server, wherein thetemporary trusted login token includes a service authorization thatidentifies one or more service pages that can be accessed throughtemporary trusted login, the temporary trusted login token comprising afirst mapping relationship between one or more service identificationscorresponding to one or more allowed service pages and the temporarytrusted login token, and further comprising a second mappingrelationship between a current trusted login identification issued bythe first server and the temporary trusted login token, wherein thefirst mapping relationship and the second mapping relationship areseparate mapping relationships; and sending, from the second server, thetemporary trusted login token to the target client terminal, wherein thetarget client terminal logs in to the first server and accesses theservice page using the temporary trusted login token.
 22. Thenon-transitory, computer-readable medium of claim 21, wherein thetemporary trusted login token identifies a first mapping relationshipbetween an identification of the service page and the temporary trustedlogin token, and a second mapping relationship between an identificationof a current trusted login identification issued by a server that servesthe service page and the temporary trusted login token.
 23. Thenon-transitory, computer-readable medium of claim 22, wherein theservice authorization identifies the service page when the temporarytrusted login token satisfies the first mapping relationship and thesecond mapping relationship.
 24. The non-transitory, computer-readablemedium of claim 21, further comprising sending the service page to theoriginating application after determining the service page is includedin the one or more service pages that are identified by the serviceauthorization.
 25. The non-transitory, computer-readable medium of claim21, wherein the temporary trusted login token is valid within apredetermined time period after being generated and is updatedperiodically.
 26. A computer-implemented system, comprising: one or morecomputers; and one or more computer memory devices interoperably coupledwith the one or more computers and having tangible, non-transitory,machine-readable media storing one or more instructions that, whenexecuted by the one or more computers, perform one or more operationscomprising: receiving, at a second server that serves an originatingapplication and from a target client terminal, a request for trustedlogin, wherein the request for trusted login comprises a request toaccess a service page provided by a first server within a targetapplication; generating, by the second server, a trusted login tokenacquisition request, wherein the trusted login token acquisition requestis based on the request for trusted login, the generating comprising,obtaining a current trusted login identifier issued by the first serverto the second server, wherein the current trusted login identifiercertifies the second server to obtain a temporary trusted login token,and writing the current trusted login identifier into the request toaccess the service page provided by the first server to generate thetrusted login token acquisition request; sending, from the secondserver, the trusted login token acquisition request to the first server;receiving, at the second server, a temporary trusted login token fromthe first server, wherein the temporary trusted login token includes aservice authorization that identifies one or more service pages that canbe accessed through temporary trusted login, the temporary trusted logintoken comprising a first mapping relationship between one or moreservice identifications corresponding to one or more allowed servicepages and the temporary trusted login token, and further comprising asecond mapping relationship between a current trusted loginidentification issued by the first server and the temporary trustedlogin token, wherein the first mapping relationship and the secondmapping relationship are separate mapping relationships; and sending,from the second server, the temporary trusted login token to the targetclient terminal, wherein the target client terminal logs in to the firstserver and accesses the service page using the temporary trusted logintoken.
 27. The computer-implemented system of claim 26, wherein thetemporary trusted login token identifies a first mapping relationshipbetween an identification of the service page and the temporary trustedlogin token, and a second mapping relationship between an identificationof a current trusted login identification issued by a server that servesthe service page and the temporary trusted login token.
 28. Thecomputer-implemented system of claim 27, wherein the serviceauthorization identifies the service page when the temporary trustedlogin token satisfies the first mapping relationship and the secondmapping relationship.
 29. The computer-implemented system of claim 26,further comprising sending the service page to the originatingapplication after determining the service page is included in the one ormore service pages that are identified by the service authorization. 30.The computer-implemented system of claim 26, wherein the temporarytrusted login token is valid within a predetermined time period afterbeing generated and is updated periodically.